$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa File: cd939959-f7a9-375a-86a0-c699a51f7975.roa (raw, json) Hash identifier: f1WeJzVpzzLKBkWkxfrpV6O0UvShYNbRoaVxuDyHB9I= Subject key identifier: E8:6B:07:5C:15:C3:A1:E7:87:4D:A8:62:B3:B4:B9:AD:74:A2:0B:74 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584E9384F9F1DCF041CACB148D00 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 21947 IP address blocks: 199.195.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:f9:f1:dc:f0:41:ca:cb:14:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=85969075-bd71-48dd-afcd-d025b4528b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:90:a4:8d:b3:34:c2:41:eb:a2:e0:34:9f:32: 76:f5:75:bb:4a:8e:25:f1:c3:87:04:34:eb:17:c4: 68:b7:a3:2c:06:ab:1e:52:a5:a4:90:2a:f6:32:a2: b8:59:c4:b5:97:1b:a1:9d:5c:e3:4c:b4:0f:21:8d: d6:64:95:13:6e:cc:94:b7:84:86:5b:3a:df:77:e4: 65:1b:1c:9e:6b:5e:6b:71:79:96:9b:ef:2a:6d:2e: e5:ef:ed:df:30:41:f4:2c:ff:74:e2:9a:e8:9a:1b: b2:57:60:41:9b:42:d1:f2:86:10:8b:0e:ac:2f:e8: 49:e2:c1:f2:86:b3:f6:28:10:4e:af:fa:66:84:b6: b8:73:ad:94:fb:4c:d8:db:06:bf:1d:8a:60:a4:5e: 4c:6a:98:1d:4e:06:7c:5a:3e:e5:21:56:0b:01:05: 52:5a:22:bb:8d:9b:17:6b:c3:c6:73:53:36:e7:e9: 83:0c:d1:0b:91:57:73:81:35:69:e2:16:95:7b:b1: 7d:11:9a:fd:99:fd:ca:f4:50:ab:39:67:91:90:cd: a7:84:3a:62:03:8c:51:a5:4f:c6:ce:5d:e0:ee:0f: f0:33:bc:5d:71:20:e6:a0:fc:49:de:d1:7b:4e:cd: 1f:79:bd:2e:35:37:9f:8f:02:50:b9:71:e9:43:ff: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6B:07:5C:15:C3:A1:E7:87:4D:A8:62:B3:B4:B9:AD:74:A2:0B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/cd939959-f7a9-375a-86a0-c699a51f7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9b:bb:b6:b5:24:3f:36:51:e1:cc:51:79:b0:ea:e3:3f:54: cc:20:c3:21:c8:65:f3:a0:7d:54:07:2a:2f:f8:b9:aa:6b:00: 8e:51:4e:c0:9c:20:fd:f6:87:3a:03:d2:7d:fa:5b:32:61:47: cd:ad:f4:8f:6e:50:95:bf:01:7d:50:0b:8d:cb:eb:03:70:26: 17:6d:f3:ae:c7:90:7d:05:b8:7d:71:ac:82:ef:51:1e:03:6d: 4c:df:60:1d:46:f2:2a:ad:cf:dd:81:45:f1:01:b6:73:35:d3: 53:8f:43:c2:98:a1:31:db:de:c7:fc:c0:28:69:b6:cd:83:8d: 14:12:f1:4b:13:45:e6:ee:28:93:cc:9a:3a:14:04:41:44:bb: 03:c3:26:73:50:84:6d:1d:9b:0c:40:7b:3a:fb:10:3f:93:66: 61:6f:57:ec:05:ad:b4:fa:a8:18:40:48:9e:6b:9d:4b:ed:8d: d7:a5:65:08:8f:2e:de:08:7e:f7:07:3e:6e:be:0f:6d:69:0d: 82:5e:81:79:e2:34:d3:6f:23:f3:ea:9f:9c:24:c4:b5:d7:72: e9:ae:9e:02:cb:79:df:ed:15:32:55:c2:7b:8a:39:83:23:d0: 26:70:d6:cd:b2:47:02:e1:47:a3:0e:ad:53:4b:ab:0f:84:a2: c6:9e:96:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPnx3PBByssUjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk ODU5NjkwNzUtYmQ3MS00OGRkLWFmY2QtZDAyNWI0NTI4YjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZCkjbM0wkHrouA0nzJ29XW7So4l8cOHBDTr F8Rot6MsBqseUqWkkCr2MqK4WcS1lxuhnVzjTLQPIY3WZJUTbsyUt4SGWzrfd+Rl Gxyea15rcXmWm+8qbS7l7+3fMEH0LP904promhuyV2BBm0LR8oYQiw6sL+hJ4sHy hrP2KBBOr/pmhLa4c62U+0zY2wa/HYpgpF5MapgdTgZ8Wj7lIVYLAQVSWiK7jZsX a8PGc1M25+mDDNELkVdzgTVp4haVe7F9EZr9mf3K9FCrOWeRkM2nhDpiA4xRpU/G zl3g7g/wM7xdcSDmoPxJ3tF7Ts0feb0uNTefjwJQuXHpQ/8PQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhrB1wVw6Hnh02oYrO0ua10ogt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvY2Q5Mzk5NTktZjdhOS0z NzVhLTg2YTAtYzY5OWE1MWY3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2bu7a1JD82UeHMUXmw6uM/VMwgwyHIZfOgfVQHKi/4uaprAI5RTsCc IP32hzoD0n36WzJhR82t9I9uUJW/AX1QC43L6wNwJhdt867HkH0FuH1xrILvUR4D bUzfYB1G8iqtz92BRfEBtnM101OPQ8KYoTHb3sf8wChpts2DjRQS8UsTRebuKJPM mjoUBEFEuwPDJnNQhG0dmwxAezr7ED+TZmFvV+wFrbT6qBhASJ5rnUvtjdelZQiP Lt4IfvcHPm6+D21pDYJegXniNNNvI/Pqn5wkxLXXcumungLLed/tFTJVwnuKOYMj 0CZw1s2yRwLhR6MOrVNLqw+EosaelmE= -----END CERTIFICATE-----Generated at Fri Jul 24 09:04:42 2026 by rpki-client